* do the mount namespace and MS_REC/MS_SLAVE earlier to
  avoid that the real /tmp is bind mounted in the main
  mount namespace (this will also prevent automount daemons
  from running under the ubuntu-core-launcher)